Method, system, and device for network control

ABSTRACT

Embodiments of the present application relate to a method, device, and system for network control. The method includes determining, by one or more processors, whether a target application is running in a foreground of a terminal, the target application being included in a set of target applications, and in response to determining that the target application is running in the foreground, blocking or throttling, by the one or more processors, network communication for at least one application not included in the set of target applications.

CROSS REFERENCE TO OTHER APPLICATIONS

This application is a continuation of co-pending U.S. patent applicationSer. No. 16/007,160, entitled METHOD, SYSTEM, AND DEVICE FOR NETWORKCONTROL filed Jun. 13, 2018 which is incorporated herein by referencefor all purposes, which claims priority to People's Republic of ChinaPatent Application No. 201710459379.6 entitled A NETWORK CONTROL METHODAND MEANS filed Jun. 16, 2017, which is incorporated herein by referencefor all purposes.

FIELD OF THE INVENTION

The present application relates to a field of communication technology.In particular, the present application relates to a method, system, anddevice for network control.

BACKGROUND OF THE INVENTION

A user of a terminal (such as a mobile phone or a tablet computer) mayhave a poor experience when performing application operations due to theconsumption of network resources (e.g., bandwidth) by severalapplications running on the terminal. For example, performance of aterminal can depend on a number of applications being executed at onetime. In some cases, if more than one additional application is openwhen a user is playing a combat game on a terminal such as a mobilephone, the multiple open applications will consume bandwidth of theconnection between the terminal and the mobile phone. Accordingly, theInternet connection speed experienced by any one of the applicationsbeing executed can be negatively impacted and thus the execution of aplurality of applications while the user is playing the combat game cancause the connection speed of the combat game to close. The user'sexperience suffers as a result. Moreover, the mobile phone may receivemessage alerts from instant messaging applications while the combat gameis being played, and such applications can also detract from the user'sexperience.

Therefore, a method, device, smart terminal, and system for improving aconnection speed of a particular application being executed are desired.

BRIEF DESCRIPTION OF THE DRAWINGS

Various embodiments of the invention are disclosed in the followingdetailed description and the accompanying drawings.

FIG. 1 is a flowchart of a method for network control according tovarious embodiments of the present application.

FIG. 2 is a diagram of a virtual private network (VPN) used to blocknetwork communications by relevant applications according to variousembodiments of the present application.

FIG. 3 is a flowchart of a method for network control according tovarious embodiments of the present application.

FIG. 4 is a flowchart of a method for network control according tovarious embodiments of the present application.

FIG. 5 is a flowchart of a method for network control according tovarious embodiments of the present application.

FIG. 6 is a functional diagram of a computer system for performingnetwork control according to various embodiments of the presentdisclosure.

DETAILED DESCRIPTION

The invention can be implemented in numerous ways, including as aprocess; an apparatus; a system; a composition of matter; a computerprogram product embodied on a computer readable storage medium; and/or aprocessor, such as a processor configured to execute instructions storedon and/or provided by a memory coupled to the processor. In thisspecification, these implementations, or any other form that theinvention may take, may be referred to as techniques. In general, theorder of the steps of disclosed processes may be altered within thescope of the invention. Unless stated otherwise, a component such as aprocessor or a memory described as being configured to perform a taskmay be implemented as a general component that is temporarily configuredto perform the task at a given time or a specific component that ismanufactured to perform the task. As used herein, the term ‘processor’refers to one or more devices, circuits, and/or processing coresconfigured to process data, such as computer program instructions.

A detailed description of one or more embodiments of the invention isprovided below along with accompanying figures that illustrate theprinciples of the invention. The invention is described in connectionwith such embodiments, but the invention is not limited to anyembodiment. The scope of the invention is limited only by the claims andthe invention encompasses numerous alternatives, modifications andequivalents. Numerous specific details are set forth in the followingdescription in order to provide a thorough understanding of theinvention. These details are provided for the purpose of example and theinvention may be practiced according to the claims without some or allof these specific details. For the purpose of clarity, technicalmaterial that is known in the technical fields related to the inventionhas not been described in detail so that the invention is notunnecessarily obscured.

The following is a detailed explanation of embodiments of the presentapplication in light of the drawings. The embodiments described belowserve only to explain and interpret the present application and do notlimit the present application.

Please understand that the embodiments of the present application andthe various features within the embodiments may be combined if they donot conflict and will in all such cases remain within the protectivescope of the present application. In addition, although the flowchartdepicts a logical sequence, the steps that are shown or described may beexecuted according to a different sequence.

In some embodiments, a computing device that executes the networkcontrol method comprises one or more processors (CPUs), input/outputports, network interfaces, and memory.

Memory may include the following forms in computer-readable media:volatile memory, random access memory (RAM), and/or non-volatile memory,e.g., read-only memory (ROM) or flash RAM. Memory is an example of acomputer-readable medium. Memory may comprise module 1, module 2, . . ., module N (being an integer greater than 2).

Computer-readable media include permanent, non-permanent, mobile, andnon-mobile media. Storage media may store information by any method ortechnique. The information may be computer-readable instructions, datastructures, program modules, or other data. Examples of computer storagemedia include, but are not limited to, phase-change memory (PRAM),static random access memory (SRAM), dynamic random access memory (DRAM),other types of random access memory (RAM), read-only memory (ROM),electrically erasable programmable read-only memory (EEPROM), flashmemory or other memory technology, compact disk-read only memory(CD-ROM), digital versatile disk (DVD) or other optical storage,cassette tapes, magnetic tape and disk storage or other magnetic storagedevices, or any other non-transmitting media that may be used to storecomputer-accessible information. In accordance with the definitions inthis document, computer-readable media do not include non-transientcomputer-readable media (transitory media) such as modulated datasignals and carrier waves.

As used herein, a terminal generally refers to a device comprising oneor more processors. A terminal can be a device used (e.g., by a user)within a network system and used to communicate with one or moreservers. According to various embodiments of the present disclosure, aterminal includes components that support communication functionality.For example, a terminal can be a smart phone, a server, a machine ofshared power banks, information centers (such as one or more servicesproviding information such as traffic or weather, etc.), a tabletdevice, a mobile phone, a video phone, an e-book reader, a desktopcomputer, a laptop computer, a netbook computer, a personal computer, aPersonal Digital Assistant (PDA), a Portable Multimedia Player (PMP), anmp3 player, a mobile medical device, a camera, a wearable device (e.g.,a Head-Mounted Device (HMD), electronic clothes, electronic braces, anelectronic necklace, an electronic accessory, an electronic tattoo, or asmart watch), a kiosk such as a vending machine, a smart home appliance,vehicle-mounted mobile stations, or the like. A terminal can run variousoperating systems.

In some embodiments, a “smart terminal” is a terminal device havingmultimedia functions. A smart terminal supports audio, video, data, andother such functions. The smart terminal can have a touchscreen. Thesmart terminal can correspond to a smart mobile device such as a smartphone, a tablet computer, or a smart wearable device, or a smarttelevision, personal computer, or other such device with a touchscreen.Various operating systems such as Android, iOS, YunOS, tvOS, and Windowscan be implemented on the smart terminal. Various embodiments discussedherein are in the context of the example of a television device usingtvOS; however, other types of terminals or operating systems can beused. A smart terminal can be connected to one or more networks such asthe Internet, a WiFi network, a Local Area Network (LAN), a Wide AreaNetwork (WAN), a telecommunications network, etc.

According to various embodiments, communication for a set ofapplications being executed is controlled. For example, a first set ofapplications can be determined to have priority over a second set ofapplications with respect to network communications. In response todetermining that a particular application or a particular type ofapplication is being run in the foreground (e.g., currently being usedby the user, or being actively used by the user), network communicationfor one or more other applications can be controlled.

FIG. 1 is a flowchart of a method for network control according tovarious embodiments of the present application.

Referring to FIG. 1, process 100 for network control is provided.Process 100 can be implemented in connection with virtual privatenetwork (VPN) 200 of FIG. 2. Process 100 can be implemented inconnection with process 300 of FIG. 3, process 400 of FIG. 4, and/orprocess 500 of FIG. 5. Process 100 can be implemented by computer system600 of FIG. 6.

At 110, a terminal determines whether a target speed-boost applicationis running. In some embodiments, the terminal determines whether atarget speed-boost application is running in the foreground. Theoperating system of the terminal can determine the one or moreapplications running in the foreground of the terminal. The one or moreapplications running in the foreground of the terminal can be determinedbased at least in part on an Application Programming Interface (API)checking a status. For example, for a terminal running an Androidoperating system, one or more applications running in the foreground ofthe terminal can be determined based onandroid.permission.PACKAGE_USAGE_STATS. In some embodiments, anapplication determines whether an application is a target speed-boostapplication. In some embodiments, the operating system of the terminaldetermines whether an application is a target speed-boost application.

As an example, an application running in the foreground corresponds toan application that is being displayed (e.g., in a foreground) on a userinterface of the terminal. As another example, an application running inthe foreground corresponds to an application that is active such as anapplication that is being used by a user of the terminal. An activeapplication can comprise an application that is selected or in which aninput is submitted by a user of the terminal. As another example, anapplication running in the foreground corresponds to an application thatis currently being used by the user. As another example, an applicationrunning in the foreground corresponds to an application that is beingactively used by the user.

In some embodiments, a target speed-boost application corresponds to anapplication that requires a large amount of network communicationbandwidth in order to provide a certain Quality of Service to a user.For example, a target speed-boost application can consume a networkcommunication bandwidth that exceeds a predefined threshold. As anotherexample, a target speed-boost can have a minimum targeted networkcommunication bandwidth. The minimum targeted network communicationbandwidth can correspond to network communication bandwidth with whichthe corresponding target speed-boost application will operate asdesired. For example, the minimum targeted network communicationbandwidth can be configured according to user settings or preferences.As another example, the minimum targeted network communication bandwidthcan be predefined by a developer of the application.

In some embodiments, a terminal stores a mapping of applications totarget speed-boost applications. The mapping of applications to targetspeed-boost applications can identify applications installed on theterminal that correspond to target speed-boost applications. As anexample, the mapping of applications to target speed-boost applicationscan be configured by a user (e.g., according to user preferences or usersettings). As another example, the mapping of applications to targetspeed-boost applications can be configured based on an indicatorassociated with an application installed on the terminal. The indicatorcan also be referred to herein as the target speed-boost indicator. Theindicator can be set according to whether the corresponding applicationis a target speed-boost application. As an example, the indicator can beset by the user (e.g., according to user preferences or user settings).As another example, the indicator can be set by the developer of theapplication. In some embodiments, the indicator corresponds to theapplication package name.

In some embodiments, the target speed-boost indicator is set on anapplication-by-application basis. For example, the target speed-boostindicator can be set for an application individually (e.g., independentof the target speed-boost indicator setting of another application). Insome embodiments, the target speed-boost indicator is set according toapplication type. One example is one or more applications installed onthe terminal and having a particular type of application (e.g., apredefined type of application). Applications can be associated with oneor more types of applications. The one or more types of applicationswith which a particular application is associated can be set by a user,an administrator, and/or a developer of the particular application. Asan example, types of applications can comprise communicationapplications, email applications, instant messaging applications, wordprocessing applications, gaming applications, media applications, videoapplications, weather applications, shopping applications, calendarapplications, etc.

In some embodiments, target speed-boost applications comprise a list ofpre-specified network speed-boost applications. For example, a combatgame application and other applications can be included on a list ofnetwork speed-boost applications. The terminal can store the list ofnetwork speed-boost applications. The list of network speed-boostapplications can be configured (e.g., modified, updated, etc.) by auser. For example, the user can modify the list of network speed-boostapplications to add one or more applications that the user desires to bedeemed target speed-boost applications. As another example, the user canmodify the list of network speed-boost applications to delete one ormore applications from the list of network speed-boost applications forone or more applications that the user no longer deems to be targetspeed-boost applications. The list of network speed-boost applicationscan be configured on an application-by-application basis. For example,the list of network speed-boost applications can be configured for anapplication individually (e.g., independent of another application). Insome embodiments, the list of network speed-boost applications can beconfigured according to application type. One example is one or moreapplications installed on the terminal and having a particular type ofapplication (e.g., a predefined type of application). Applications canbe associated with one or more types of applications. The one or moretypes of applications with which a particular application is associatedcan be set by a user, an administrator, and/or a developer of theparticular application. As an example, types of applications cancomprise communication applications, email applications, instantmessaging applications, word processing applications, gamingapplications, media applications, video applications, weatherapplications, shopping applications, calendar applications, etc. In someembodiments, the system provides a list of applications installed on theterminal (e.g., a complete list of applications installed on theterminal), and a manager, an administrator, and/or the user selectswhich of the applications on the list of applications are to be deemedtarget speed-boost applications. The applications selected to be deemedtarget speed-boost applications can be identified as target-speed boostapplications.

In some embodiments, the determining that a target speed-boostapplication is running in the foreground comprises obtaining anidentifier associated with the application running in the foreground andquerying the list of network speed-boost applications based at least inpart on the identifier associated with the application running in theforeground. In response to determining that the list of networkspeed-boost applications comprises the application determined to berunning in the foreground (or an identifier associated with theapplication determined to be running in the foreground), the terminaldetermines that a target speed-boost application is running theforeground.

In some embodiments, the determining that a target speed-boostapplication is running in the foreground comprises determining anapplication running in the foreground (e.g., obtaining an identifierassociated with the application running in the foreground) and queryingthe mapping of applications to target speed-boost applications based atleast in part on the application running in the foreground (or anidentifier associated with the application determined to be running inthe foreground). In response to determining that the mapping ofapplications to target speed-boost applications comprises theapplication determined to be running in the foreground (or an identifierassociated with the application determined to be running in theforeground), the terminal determines that a target speed-boost isrunning in the foreground.

The determination of whether a target speed-boost application is running(e.g., in the foreground) can be made continuously, according to apreset time period, etc.

At 120, communication for one or more applications that are not within aset of applications is blocked. The set of applications can comprise oneor more target speed-boost applications. In some embodiments, the set ofapplications comprises target speed-boost applications and one or moreapplications that are not target speed-boost applications.

In response to determining that a target speed-boost application isrunning in the foreground, the terminal uses a virtual private network(VPN) to block communications by applications other than targetapplications (e.g., one or more applications that are not within a setof applications). The target applications comprise at least the targetspeed-boost application running in the foreground. In some embodiments,the terminal invokes the VPN in response to determining that a targetspeed-boost application is running in the foreground. As an example, theinvocation of the VPN comprises executing a networking application orprocess that configures and manages the VPN. As an example, theinvocation of the VPN comprises providing information to an applicationor process associated with the VPN. For example, if an application orprocess associated with the VPN is running in the background when theterminal determines that the target speed-boost application is running,the terminal can provide an instruction to the application or processassociated with the VPN to perform corresponding network trafficmanagement (e.g., blocking communication for one or more applicationsthat are not within a set of applications). Various embodiments use theVPN to block communications by applications other than targetapplications rather than directly blocking such applications by droppingconnections for such applications because control of the net connectionby the system may not be available or permitted.

According to various embodiments, the VPN is configured to selectivelyblock communications from one or more applications. The VPN can block orthrottle communication between the VPN and applications other than thetarget applications. For example, the VPN determines whethercommunication corresponds to communication with an application otherthan the target application based on an identifier included in thecommunication (e.g., an identifier included in the metadata or header ofinformation being communicated). As an example, the identifier indicatesthe application with which the information is associated. As anotherexample, the identifier indicates a type of application with which theinformation is associated.

In some embodiments, in response to determining that a targetspeed-boost is running (e.g., in the foreground), the terminal blockscommunications for one or more applications that are not within a set ofapplications. The terminal can allocate additional network communicationbandwidth to the target speed-boost application determined to be runningin the foreground.

In some embodiments, blocking communication for the one or moreapplications comprises throttling communication for the one or moreapplications. For example, the terminal can restrict outgoingcommunication for the one or more applications, and permit incomingcommunication for the one or more applications. As another example, theterminal can restrict incoming communication for the one or moreapplications, and permit outgoing communication for the one or moreapplications. As another example, the terminal can set a thresholdamount of network bandwidth that is to be allocated to the one or moreapplications. The threshold amount of a network bandwidth that is to beallocated to the one or more applications can be configured by the user(e.g., according to user preferences or user settings, etc.). In someembodiments, a threshold amount of a network bandwidth that is to beallocated to the one or more applications is configured on anapplication-by-application basis (e.g., for an application on anindividual basis). In some embodiments, the threshold amount of anetwork bandwidth that is to be allocated to the one or moreapplications is configured on an application type-by-application typebasis (e.g., the threshold amount of a network bandwidth can be setaccording to a type of application).

In some embodiments, the target applications comprise only a targetspeed-boost application. In response to determining that a targetspeed-boost application is running in the foreground, a VPN is used toblock network communications by applications other than the targetspeed-boost application.

In some embodiments, the target applications comprise a targetspeed-boost application and one or more associated applications that areassociated with the target speed-boost application. In response todetermining a target speed-boost application is running in theforeground, a VPN can be used to block network communications byapplications other than the target speed-boost application and theapplications associated with the target speed-boost application. Theassociation between the speed-boost application and the otherapplications can be set by the user or developer, or the associationbetween the speed-boost application and the other applications can bedetermined according to inter-application calling relationships. Forexample, the terminal can store a mapping of associations between anapplication and one or more other applications.

One example is if the target speed-boost application is Application A.While Application A is running, Application A may jump over to and runApplication B. The Application A can jump over to and run Application Bbased on a package name. Thus, Application B may be regarded as anapplication associated with Application A. If currently openedapplications include Application A, Application B, Application D, andApplication E, and if unopened applications are not conducting networkcommunications, then Application A, while running in the foreground, canuse a VPN to block network communications by Application D andApplication E, with the result that Application A and Application Bremain connected to the network while Application A is shielded frommessage notifications from Application D and Application E whileApplication A is running.

In some embodiments, all traffic arising from applications on theterminal is sent through the VPN, and the VPN selectively allows/blockstraffic.

In some embodiments, using a VPN to block network communications byapplications other than the target application comprises: directing(e.g., causing) the target applications to use normal communicationchannels (e.g., unencrypted network channels provided by a physicalnetwork interface card) in connection with communicating over a network,and directing (e.g., causing) applications other than targetapplications to communicate via a VPN in connection with performingcommunications over a network. The terminal can direct (e.g., cause) theapplications other than target applications to communicate via the VPNbased on using an API (e.g., VpnService). The VPN can selectively and/ortemporarily block (or throttle) communications between applications(specifically, applications other than the target applications) and thenetwork. In response to determining that a target speed-boostapplication is no longer running in the foreground, the terminal cancause the applications other than the target applications to stopcommunicating via the VPN. As an example, if the terminal causes theapplications other than the target applications to stop communicatingthe VPN, the applications other than the target applications cancommunicate via other means. For example in response to determining thata target speed-boost application is no longer running in the foreground,the terminal can direct network communications for all applications touse normal communication channels (network channels provided by aphysical network interface card) in connection with communicating over anetwork. The terminal can stop the VPN, including exiting or closing anapplication or process associated with the VPN.

In some embodiments, using a VPN to block network communications byapplications other than the target application comprises: directing thetarget applications to use network channels provided by a physicalnetwork interface card to conduct network communications; directingapplications other than target applications to use network channelsprovided by a VPN virtual network interface card to conduct networkcommunications, and temporarily blocking network channels provided bythe VPN virtual network interface card.

In some embodiments, the terminal restores the network channels providedby the VPN virtual network interface card upon determining that thetarget speed-boost application has stopped running in the foreground.For example, in response to the target speed-boost application no longerrunning in the foreground, the network channels of applications otherthan the target applications are restored.

In some embodiments, setting or defining the target applications and theapplications other than the target applications are configured by auser. For example, a user can set or define the target applications andthe applications other than the target applications in advance ofprocess 100. The user can pre-configure the target applications on aterminal device to conduct network communications using network channelsprovided by a physical network interface card and pre-configureapplications other than the target applications to conduct networkcommunications using network channels provided by a VPN virtual networkinterface card. Configuring the target applications or the applicationsother than the target applications can comprise configuring (e.g.,modifying) the application package name. In response to the terminaldevice determining that the target speed-boost application is running inthe foreground, the terminal obtains pre-configuration with respect tothe target applications and/or the applications other than the targetapplication, and based at least in part on the pre-configuration withrespect to the target applications and/or the applications other thanthe target application, the terminal temporarily blocks the networkcommunication provided by the VPN (e.g., block the network channelsprovided by the VPN virtual network interface card). For example, theterminal disconnects (e.g., from network communication) the applicationsother than the target applications. As another example, in response todetermining that a target speed-boost application is running in theforeground, the terminal can prompt the user to select and confirm on adisplay interface which applications are to be blocked, obtain an inputfrom the user corresponding to selection of applications to be blocked(e.g., for which network communication is to be blocked), and inresponse to selection of the applications to be blocked, cause theuser-selected applications to communicate via the VPN in connection withnetwork communications (e.g., cause the user-selected applications touse communication channels provided by a VPN virtual network interfacecard to conduct network communications). Communication via the VPN(e.g., the network channels provided by the VPN virtual networkinterface card) is temporarily blocked. For example, the communicationvia the VPN is blocked until the target speed-boost application is nolonger running in the foreground.

A process according to which a VPN is used in connection with blockingnetwork communication of relevant applications (e.g., applications otherthan the target application) is described in connection with FIG. 2.

FIG. 2 is a diagram of a virtual private network (VPN) used to blocknetwork communications by relevant applications according to variousembodiments of the present application.

Referring to FIG. 2, system 200 for network control is provided. System200 can be implemented in connection with process 100 of FIG. 1, process300 of FIG. 3, process 400 of FIG. 4, and/or process 500 of FIG. 5.System 200 can be implemented at least in part by computer system 600 ofFIG. 6.

As illustrated in FIG. 2, system 200 comprises terminal 210 and network220. Terminal 210 can communicate with one or more network resources vianetwork 220. For example, terminal 210 can communicate with one or moreservers via network 220. Terminal 210 can communicate via network 220 inconnection with obtaining one or more services (e.g., an Internet-basedservice), etc.

Terminal 210 stores applications 212. One or more applications ofapplications 212 can be executed on terminal 210. Terminal 210 can runone or more applications of applications 212 in the background, and canrun one or more applications of applications 212 in the foreground. Anapplication running in the foreground can correspond to an applicationfor which an interface is being displayed on a screen or an applicationthat the user of the terminal is actively engaging (e.g., via one ormore inputs). An application running in the background can correspond toan application for which processes are being run for which an interfaceis not displayed on a screen or with which the user of the terminal isnot actively engaging. In some embodiments, an application in thebackground does not provide a user interface, and an application in theforeground provides a user interface. Applications 212 on terminal 210can be divided into two types of applications: network speed-boostapplications and non-speed-boost applications.

In some embodiments, terminal 210 comprises an application layer 212 anda local network control layer 214. One or more applications running onterminal 210 can execute in the application layer 212. Local networkcontrol layer 214 can process communications between processes runningon terminal 210 and communications between terminal 210 and networkdevices such as a server, a router, a telecommunications tower, etc.Local network control layer 214 can comprise a VPN virtual networkinterface card and a physical network interface card. The VPN virtualnetwork interface card can be set up (e.g., implemented, invoked, orconfigured) based on a system using an API. The VPN virtual networkinterface card is configured to communicate with one or moreapplications in application layer 212. The VPN virtual network interfacecard is configured to route communications between the physical networkinterface card and one or more applications of the layer 212 thatcommunicate via VPN (e.g., rather than directly with the physicalnetwork interface card). For example, the VPN virtual network interfacecard can route communication between the physical network interface cardand non-speed-boost applications. The physical network interface cardcommunicates with network 220. For example, the physical networkinterface card communicates information between application layer 212and network 220. As another example, the physical network interface cardcommunicates information between the non-speed boost applications andthe network 220 via the VPN virtual network interface card .

In some embodiments, target speed-boost applications comprise a list ofpre-specified network speed-boost applications. For example, a combatgame application and other applications can be included on a list ofpre-specified network speed-boost applications. Terminal 210 can storethe list of network speed-boost applications (e.g., a list ofpre-specified network speed-boost applications). The list of networkspeed-boost applications can be configured (e.g., modified, updated,etc.) by a user. For example, the user can modify the list of networkspeed-boost applications to add one or more applications that the userdesires to be deemed target speed-boost applications. As anotherexample, the user can modify the list of network speed-boostapplications to delete one or more applications from the list of networkspeed-boost applications for one or more applications that the user nolonger deems to be target speed-boost applications. The list of networkspeed-boost applications can be configured on anapplication-by-application basis. For example, the list of networkspeed-boost applications can be configured for an applicationindividually (e.g., independent of another application). In someembodiments, the list of network speed-boost applications can beconfigured according to application type. For example, one or moreapplications installed on the terminal and having a particular type ofapplication (e.g., a predefined type of application) can be configuredaccording to the application type. Applications can be associated withone or more types of applications. The one or more types of applicationswith which a particular application is associated can be set by a user,an administrator, and/or a developer of the particular application. Asan example, types of applications can comprise communicationapplications, email clients, instant messaging applications, wordprocessing applications, gaming applications, media applications, videoapplications, weather applications, shopping applications, calendarapplications, etc. The list of speed-boost applications can be managedaccording to an application package name for the applications to bedeemed a speed-boost application. The VPN can operate according to(e.g., based on) the list of speed-boost applications. For example, theterminal (e.g., the VPN) can identify the applications for which the VPNis to be used based on the list of speed-boost applications.

The list of target speed-boost applications can be set up in advance andcan be used to record information (e.g., application IDs, names, types,network communication bandwidth preferences or requirements, etc.) aboutapplications for which network connection speeds are to be increased.For example, network speed-boost applications comprise: one or morecombat game applications (e.g., Quake™, Call of Duty™, Halo™,Half-Life™, Mortal Kombat™, etc.), etc. As another example, networkspeed-boost applications comprise: one or more sport game applications(e.g., a basketball game, a soccer game, a football game, a hockey game,a tennis game, etc.). As another example, network speed-boostapplications comprise: one or more video streamlining applications(e.g., Netflix™, Hulu™, etc.). Applications that are not stored in thelist of target speed-boost applications can be deemed non-speed-boostapplications. In some embodiments, a list of non-speed-boostapplications is stored on the terminal. In some embodiments, the usercan select applications that are to be deemed target speed-boostapplications and applications that are to be deemed non-speed-boostapplications. A target speed-boost application can correspond to anetwork speed-boost application.

A target speed-boost application performs network communication via aphysical network interface card. A non-speed-boost application performsnetwork communication via a VPN. For example, a non-speed-boostapplication can perform network communication via a VPN virtual networkinterface card. For example, the non-speed-boost applications performnetwork communication via a VPN that is not used by network speed-boostapplications (e.g., for contemporaneous network communications). Thespeed-boost applications conduct network communications through anetwork channel provided by a physical network interface card (e.g.,directly through the network channel provided by the physical networkinterface card), and a non-speed-boost application is configured (orcaused) to conduct network communications using a network channelprovided by a VPN virtual network interface card. Information (e.g.,application identifier (ID) and application name) corresponding to theapplications that are caused to communicate through a VPN virtualnetwork interface card can be added to the VPN virtual network interfacecard configuration information. Adding the information corresponding tothe applications that are caused to communicate through the VPN virtualnetwork interface card provides information to the PVN and canconfigured the application. In some embodiments, traffic from non-speedboost applications is intercepted and directed through the VPN. As anexample, the VPN can obtain traffic from non-speed boost applicationsbased on an application package name.

In some embodiments, in response to determining that a targetspeed-boost application is running in the foreground, a non-speed-boostapplication is configured to communicate with a network via the VPN. Forexample, one or more settings of the non-speed-boost application ismodified such that network communication for the non-speed-boostapplication is performed via communication with the VPN. If the one ormore settings of the non-speed-boost application are modified such thatnetwork communication for the non-speed-boost application is performedvia communication with the VPN, then the non-speed-boost applicationcommunicates via the VPN to obtain information from one or more networkservers for providing a service corresponding to the non-speed-boostapplication. As an example, if a calendar application is deemed to be anon-speed-boost application, then in response to determining that atarget speed-boost application is running in the foreground, thecalendar application is configured to communicate with a serverproviding a service or information for the calendar application suchthat communication between the calendar application and the server isperformed (e.g., routed) via the VPN. If the calendar applicationattempts to obtain information from the server, the request forinformation is communicated via the VPN.

In some embodiments, in response to determining that a targetspeed-boost application is running in the foreground, the terminal isconfigured to intercept network traffic for a non-speed-boostapplication (e.g., outgoing network traffic), and the interceptednetwork traffic is routed to the VPN. The VPN is used in connection withperforming (or managing) network communication for the non-speed-boostapplication. The VPN can block or throttle communication for thenon-speed-boost application, thereby making more bandwidth available tothe speed-boost apps. For example, the terminal (e.g., an applicationfor the VPN) can store a list of applications corresponding tonon-speed-boost applications or applications for which the VPN is toperform network communication. In response to the VPN receivinginformation to be communicated, the VPN can obtain and/or query the listof applications corresponding to non-speed-boost applications orapplications for which the VPN is to perform network communication, andthe VPN can determine whether the VPN is to permit communication of thereceived information for the application corresponding to the receivedinformation, block communication of the received information for theapplication corresponding to the received information, and/or throttlecommunication of the received information for the applicationcorresponding to the received application (e.g., based at least in parton a result of the query or on a determination that the applicationcorresponding to the received information is a non-speed-boostapplication). As an example, if a calendar application is deemed to be anon-speed-boost application, then in response to determining that atarget speed-boost application is running in the foreground, theterminal is configured to intercept between the non-speed-boostapplication (e.g., communication from the non-speed-boost application)and a server providing a service or information for the calendarapplication such that communication between the calendar application andthe server is performed (e.g., routed) via the VPN. If the calendarapplication attempts to obtain information from the server, the requestfor information is communicated via the VPN. In some embodiments,network traffic for the non-speed-boost application is intercepted by anoperating system of the terminal or a process running in the backgroundof the terminal.

In some embodiments, in response to a determination that a targetspeed-boost application is running in the foreground, network channelsprovided by a VPN virtual network interface card are temporarilyblocked. For example, the VPN virtual network interface card can be setso that the VPN temporarily stops operating and/or does not perform datatransmission or processing. Thus, the non-speed-boost applications thatconduct network communications through the VPN virtual network interfacecard are (effectively) disconnected from the network, and the networkbandwidth can be allocated to the target speed-boost application andthereby achieve the objective of increased speed. For example, if thenon-speed-boost applications that conduct network communications throughthe VPN virtual network interface card are (effectively) disconnectedfrom the network, network bandwidth that would have been consumed (orrequired) by the non-speed-boost applications is now available for useby the target speed-boost application. Moreover, because thenon-speed-boost applications are disconnected from the network, messagenotifications from the non-speed-boost applications are blocked whilethe target speed-boost application is running, and the user is thusprovided with an uninterrupted experience of the target speed-boostapplication. For example, the non-speed-boost applications aredisconnected from the network, and message notifications from thenon-speed-boost applications are blocked while the target speed-boostapplication is running in the foreground. In some embodiments, thenon-speed-boost applications are connected to the network in response todetermining that a target speed-boost application is not running in theforeground (e.g., in response to determining that the target speed-boostapplication that was running in the foreground is no longer running inthe foreground).

In some embodiments, if multiple target speed-boost applications arerecorded in a list of target speed-boost applications and at least twotarget speed-boost applications (e.g., target speed-boost application Aand target speed-boost application B) are on the list of targetspeed-boost applications, and if target speed-boost application A isrunning in the foreground and is to be shielded from interference bytarget speed-boost application B or requires additional networkbandwidth (e.g., for more effective performance), target speed-boostapplication B can be configured to conduct network communications via anetwork channel provided by a VPN virtual network interface card, withthe result that network speed-boost application B is disconnected fromthe network through blocking of the communication channel provided bythe VPN virtual interface card. If target speed-boost application A isrunning in the foreground, and there exists an association betweentarget speed-boost application B and target speed-boost application A,then both target speed-boost application A and target speed-boostapplication B can be configured to conduct network communicationsthrough network channels provided by a physical network interface card.

In some embodiments, a first target speed-boost application can bedeemed a non-speed-boost application in certain contexts such that oneor more second target speed-boost applications are allocated the networkbandwidth otherwise occupied by the first target speed-boostapplication. For example, if a first target speed-boost application isrunning in the foreground, a second target speed-boost application canbe deemed a non-speed-boost application to enable the first targetspeed-boost application to use network bandwidth that would otherwise beused by the second target speed-boost application. The second targetspeed-boost application can be configured (or network traffic can beintercepted and directed) such that communication between the secondtarget speed-boost application and a network is via the VPN. In someembodiments, a list of non-speed-boost applications and/or a list oftarget speed-boost applications can be configured according to a contextor an application.

In some embodiments, mappings of applications to target speed-boostapplications is stored (e.g., on the terminal). The target speed-boostapplications mapped to a particular application can correspond to one ormore applications that are to be deemed target speed-boost applicationsin the event that the particular application is running in theforeground. As an example, applications that are not mapped to aparticular application as target speed-boost applications can be deemedto be non-speed-boost applications in the event that the particularapplication is running in the foreground. In some embodiments, one ormore applications are deemed target speed-boost applicationsirrespective of which particular application is running in theforeground and/or irrespective of whether such one or more applicationsare mapped to the particular application as target speed-boostapplications.

In some embodiments, mappings of applications to non-speed-boostapplications are stored (e.g., on the terminal). The non-speed-boostapplications mapped to a particular application can correspond to one ormore applications that are to be deemed non-speed-boost applications inthe event that the particular application is running in the foreground.As an example, applications that are mapped to a particular applicationas non-speed-boost applications can be deemed to be non-speed-boostapplications in the event that the particular application is running inthe foreground. In some embodiments, one or more applications are deemedtarget speed-boost applications irrespective of which particularapplication is running in the foreground and/or irrespective of whethersuch one or more applications are mapped to the particular applicationas non-speed-boost applications.

Terminal 210 can determine Internet access paths depending on whetherthe current wireless network (e.g., a public WiFi network) involvesrisk. For example, if the currently connected WiFi network is assessedas risky (e.g., based on one or more risk assessment criteria), networkaccess is performed via the VPN (e.g., a VPN server). If the currentlyconnected WiFi network is assessed as having no or low risk, the networkcan be accessed directly through a router path.

In some embodiments, in response to determining that a targetspeed-boost application is running in the foreground, telephone callsand short messages (e.g., text messages) are intercepted. Telephonecalls and text messages can be intercepted based on whether a senderassociated with the telephone call or the text message is included on apreset interception list. For example, in response to receiving atelephone call or text message, the terminal queries an interceptionlist to determine whether a sender of the telephone call or the textmessage is included in the interception list. The querying of theinterception list to determine whether a sender of the telephone call orthe text message is included therein can comprise querying theinterception list to determine whether a number associated with thesender is recorded in an interception list. In some embodiments, instantmessages are intercepted in a manner similar to the telephone calls andshort messages described herein. As an example, instant messages for oneor more predefined applications can be intercepted. As another example,instant messages for one more predefined applications can be permittedto be delivered. In some embodiments, telephone calls and short messages(e.g., text messages) are intercepted if an interception setting is setto intercept telephone calls and/or text messages based on user settingsor configurations. In some embodiments, the interception list isconfigurable. For example, the interception list can be configured by auser (e.g., based on user selection and/or user settings).

In some embodiments, an element can be displayed in response tointerception of a telephone call and/or an instant message. As anexample, the element corresponds to an indication that a telephone calland/or a text message is intercepted. The element can compriseinformation associated with the intercepted telephone call and/or textmessage. For example, the element comprises one or more of senderinformation, a time the intercepted telephone call and/or text messagewas received, a link to return a telephone call and/or text message tothe sender, a link to send a preset message to the sender, a link tolaunch a telephone application and/or a messaging application, etc. Theintercepted telephone call and/or short message information can bedisplayed in the form of a floating window in a display interface.

In some embodiments, numbers to be intercepted (e.g., when a targetapplication is determined to be running in the foreground) are recordedin the interception list.

In some embodiments, the floating window (e.g., that comprisesinformation associated with an intercepted call and/or text message) issemi-transparent. The floating window can be displayed as an overlayover the target application running in the foreground. Intercepted callsand/or text messages (or information associated therewith) are displayedin the form of a floating window on a display interface. The display inthe form of the floating window can reduce an effect on currentoperations of the user on the terminal device, thereby allowing the userto be aware of intercepted calls and short messages in real time andthus to avoid missing important matters. The floating window canautomatically disappear after being displayed for a predetermined lengthof time, or the floating window can disappear after receiving anappropriate operation by the user (e.g., clicking on the floatingwindow, clicking outside the floating window, or flipping over orshaking the terminal device).

In some embodiments, a white list of numbers could be set up in advance.In this case, calls and short messages from numbers not on the whitelist could be intercepted when a target speed-boost application has beendetected running in the foreground. In some embodiments, terminals storea white list comprising information associated with senders for which atelephone call and/or a text message (or another predefined form ofcommunication) is delivered irrespective of whether a telephoneapplication, text messaging application, email client, etc. is deemed anon-speed-boost application when a target application (e.g., aparticular target application, or any application deemed to be a targetapplication) is running in the foreground.

FIG. 3 is a flowchart of a method for network control according tovarious embodiments of the present application.

Referring to FIG. 3, process 300 for network control is provided.Process 300 can be implemented in connection with virtual privatenetwork (VPN) 200 of FIG. 2. Process 300 can be implemented inconnection with process 100 of FIG. 1, process 400 of FIG. 4, and/orprocess 500 of FIG. 5. Process 300 can be implemented by computer system600 of FIG. 6.

At 310, a target application (in this case, a game application) isexecuted on a terminal. The game application can be executed in responseto a user selecting to open the game application.

At 320, the terminal determines whether a game application is running.In some embodiments, the terminal determines whether the gameapplication is running in the foreground of the terminal. An applicationor process running on an operating system of the terminal can determinewhether a game application is running in the foreground.

In response to determining that a game application is not running at320, process 300 can end. For example, in response to determining thatthe game application is not running in the foreground, process 300 canend.

In response to determining that a game application is running at 320,process 300 proceeds to 330. For example, in response to determiningthat the game application is running in the foreground, process 300proceeds to 330.

At 330 a VPN network control is activated. The terminal can activate(e.g., invoke or send information to the VPN to initiate a VPN networkcontrol) in response to determining that the game application is runningin the foreground.

As an example, the terminal can use a VPN to block the networkconnections of open applications other than the current gameapplication, with the result that the current game application can usethe available network bandwidth for itself. Thus, the network connectionspeed for the game application is increased and the objective ofboosting the speed of the game is achieved.

As an example, the terminal device prompts the user to confirm whichapplications are to have network connections blocked. In response to auser selecting one or more applications to be subject to networkconnection blocking, the terminal device can cause the one or moreuser-selected applications to communicate with a network via the VPN.The terminal directs (or causes) the user-selected applications to usenetwork channels provided by a VPN virtual network interface card toconduct network communications. The terminal can temporarily blocknetwork channels provided by the VPN virtual network interface card. Theuser-selected applications can be opened applications (e.g.,applications running in the background, etc.), or the applications canbe temporarily unopened applications. Blocking network communication forone or more applications (e.g., the one or more user-selectedapplications) protects the network connection speed of the gameapplication from the effects of starting other applications while thegame application is running or from the effects of one or moreuser-selected applications performing network communication (e.g., inthe background) and consuming network bandwidth.

If an application is subject to a blocking of network communications,the application cannot conduct network communications (e.g., whiledisconnected from the network), and the application will not communicatemessage notifications. The user is thus not subject to annoyances whileinteracting with the gaming application (e.g., that is running in theforeground) and thus is provided with a pure entertainment experience.

At 340, interception of telephone calls and messaging (e.g., shortmessages or text messages) is activated. As an example, the terminalactivates the interception of telephone calls and messaging in responseto determining that the gaming application is running in the foreground.Thus, when the game application is running in the foreground,interception of calls and short messages is activated. The activation ofinterception of calls and/or short messages can be based on an API(e.g., an API being invoked or being used to communicate information)provided by the system. In response to the interception of telephonecalls and messaging being activated, telephone calls and messagesreceived or sent by the terminal are intercepted. Intercepting thetelephone calls and/or messages can be performed according to aninterception list. As an example, the user can set up an interceptionlist to intercept calls and/or short messages from numbers (or senders)on the interception list. As a result, the user performs gamingoperations without interruptions caused by telephone calls and/ormessages. The user is provided with an immersion-type gaming experience.In some embodiments, a notification of the interception of a telephonecall and/or message is provided (e.g., displayed to the user). In someembodiments, information associated with an intercepted telephone calland/or message is provided (e.g., to the user). The notification orinformation associated with the intercepted telephone call and/ormessage can be displayed in a floating window on the user interface. Forexample, an alert in the form of a floating window can be provided to auser playing a game after a call or a short message has beenintercepted. Providing an alert or notification of the interception of atelephone call and/or message enables the user to respond to theintercepted telephone call and/or message afterwards and not to missimportant matters.

At 350, the terminal determines whether the game application has stoppedrunning. In some embodiments, the terminal determines whether the gameapplication is running (or has stopped running) in the foreground of theterminal. An application or process running on an operating system ofthe terminal can determine whether a game application is running in theforeground. The terminal can detect when the game application hasstopped running in the foreground. For example, in response to a userswitching a foreground application or closing the gaming application,the terminal can detect that the game application has stopped running inthe foreground.

In response to determining that the game application has not stoppedrunning (or that a game application is running, or not in theforeground) at 350, process 300 returns to 330. In some embodiments,upon returning to 330, the terminal maintains the VPN until the terminaldetermines to end the VPN (e.g., in response to determining that thegame application has stopped running or is switched from theforeground). For example, the VPN does not need to re-invoke the VPN inresponse to determining that the game application has not stoppedrunning. In some embodiments, in response to determining that the gameapplication has not stopped running (or that a game application isrunning) at 350, the terminal iteratively performs 350 until theterminal determines that the game application has stopped running (orthat a game application is not running in the foreground). For example,the terminal can continue to perform VPN network control while the gameapplication is running in the foreground.

In response to determining that the game application has stopped running(or that a game application is not running) at 350, process 300 proceedsto 360.

At 350, VPN network control is stopped. The terminal can stop performingVPN network control in response to determining that the game applicationhas stopped running (or that a game application is not running). As anexample, if the VPN network control is stopped, the one or moreapplications that were subject to VPN network control while the VPNnetwork control was active are no longer subject to VPN network control.In response to stopping the VPN network control, the network channelsthrough which the one or more applications communicate with a networkare restored. For example, the terminal restores the network channelsprovided by the VPN virtual network interface card. In some embodiments,if the VPN is stopped, the channels provided by the VPN are stopped.

FIG. 4 is a flowchart of a method for network control according tovarious embodiments of the present application.

Referring to FIG. 4, process 400 for network control is provided.Process 400 can be implemented in connection with virtual privatenetwork (VPN) 200 of FIG. 2. Process 400 can be implemented inconnection with process 100 of FIG. 1, process 300 of FIG. 3, and/orprocess 500 of FIG. 5. Process 400 can be implemented by computer system600 of FIG. 6.

At 410, a terminal determines that an application (e.g., a targetapplication) that is running satisfies one or more set conditions. Forexample, the terminal determines whether an application running in theforeground satisfies a set condition. The one or more set conditions canbe configurable. For example, the set condition is configurable by auser according to user input, user preferences, and/or user settings.The one or more set conditions can comprise one or more of theapplication being a particular type of application, the applicationbeing a particular application, the application having an identifiermatching a predefined identifier, the application consuming a thresholdamount of network bandwidth, the application having a minimum thresholdof network bandwidth requirements, etc.

At 420, in response to determining that the application that is runningsatisfies the one or more set conditions, communication for otherapplications that are not within a set of applications is blocked (orthrottled). For example, communication for applications that correspondto non-speed-boost applications is blocked. The set of applications cancomprise one or more target speed-boost applications. In someembodiments, the set of applications comprises target speed-boostapplications and one or more applications that are not targetspeed-boost applications.

In response to determining that an application satisfies one or more setconditions, the terminal uses a virtual private network (VPN) to blockcommunications by applications other than target applications (e.g., oneor more applications that are not within a set of applications). Thetarget applications comprise at least target speed-boost applicationsrunning in the foreground. In some embodiments, the terminal invokes theVPN in response to determining that the application running satisfiesthe one or more set conditions. As an example, the invocation of the VPNcomprises executing an application or process associated with the VPN.As an example, the invocation of the VPN comprises providing informationto an application or process associated with the VPN. For example, if anapplication or process associated with the VPN is running in thebackground when the terminal determines that the application runningsatisfies the one or more set conditions, the terminal can provide aninstruction to the application or process associated with the VPN toperform corresponding network traffic management (e.g., blockingcommunication for one or more applications that are not within a set ofapplications).

In some embodiments, blocking communication for the one or moreapplications comprises throttling communication for the one or moreapplications. For example, the terminal can restrict outgoingcommunication for the one or more applications, and permit incomingcommunication for the one or more applications. As another example, theterminal can restrict incoming communication for the one or moreapplications, and permit outgoing communication for the one or moreapplications. As another example, the terminal can set a thresholdamount of network bandwidth that is to be allocated to the one or moreapplications. For example, a VPI (e.g., the VPI corresponding toVpnService) can be used to set a threshold amount of network bandwidththat is to be allocated to the one or more applications. The thresholdamount of a network bandwidth that is to be allocated to the one or moreapplications can be configured by the user (e.g., according to userpreferences or user settings, etc.). The threshold amount of a networkbandwidth that is to be allocated to the one or more applications can beconfigured on an application-by-application basis (e.g., for anapplication on an individual basis). The threshold amount of a networkbandwidth that is to be allocated to the one or more applications can beconfigured on an application type-by-application type basis (e.g., thethreshold amount of a network bandwidth can be set according to a typeof application).

In response to detecting that the application running in the foregroundsatisfies a set condition, the terminal uses a VPN to block networkcommunications by applications other than target applications. Thetarget applications at least comprise the application running in theforeground.

The “application running in the foreground” refers to the applicationthat the user is operating on the terminal device.

In some embodiments, the determining that the application runningsatisfies the one or more set conditions comprises determining (e.g.,detecting) that the application running in the foreground is recorded ina list of pre-specified network speed-boost applications.

In some embodiments, the determining that the application runningsatisfies the one or more set conditions comprises determining (e.g.,detecting) that the historical data flow consumed by the applicationrunning in the foreground satisfies a first condition (e.g., a thresholddata consumption).

In some embodiments, the determining that the application runningsatisfies the one or more set conditions comprises determining (e.g.,detecting) that the length of the historical operating time of theapplication running in the foreground satisfies a second condition.

The use of the first condition enables the terminal to screen forapplications having greater data flow consumption. The use of the secondcondition enables the terminal to screen for applications with longeroperating times. For example, the first condition could comprise:greater than or equal to a first threshold value. The second conditioncould comprise: greater than or equal to a second threshold value. Thefirst condition and/or the second condition may be set according toactual situations.

In some embodiments, if the target applications comprise only anapplication running in the foreground, and in response to the terminaldetermining that an application running in the foreground satisfies aset condition, a VPN is used to block network communications byapplications other than the application running in the foreground.

In some embodiments, the target applications comprise an applicationrunning in the foreground and applications recorded in a list ofspeed-boost applications. In other words, in response to the terminaldetermining that an application running in the foreground satisfies aset condition, a VPN can be used to block network communications byapplications other than applications in a list of pre-specified networkspeed-boost applications. For example, an application running in theforeground is Application A, and Application A, Application B, andApplication C are recorded in a list of pre-specified networkspeed-boost applications. If the opened applications include ApplicationA, Application B, Application D, and Application E, then a VPN can beused to block network communications by Application B, Application D,and Application E, with the result that Application A can have theentire available bandwidth to itself. As another example, a VPN can usedto block network communications by Application D and Application E only,with the result that Application A and Application B share the bandwidthand Application D and Application E are prevented from interfering withthe use of Application A.

In some embodiments, the target applications comprise: an applicationrunning in the foreground and applications associated with theapplication running in the foreground. As an example, the applicationsassociated with the application running in the foreground are determinedaccording to information set up by the user. As another example, theapplications associated with the application running in the foregroundcould be determined according to inter-application call relationships.

In some embodiments, using a VPN to block network communications byapplications other than the target application comprises directing thetarget applications to use network channels provided by a physicalnetwork interface card to conduct network communications. For example,if an application running in the foreground does not satisfy the one ormore conditions, then all applications perform network communication viathe VPN. As another example, if an application running in the foregrounddoes not satisfy the one or more conditions, then one or more of thetarget applications perform network communication via the VPN.

In some embodiments, using a VPN to block network communications byapplications other than the target application comprises directingapplications other than target applications to use network channelsprovided by a VPN virtual network interface card to conduct networkcommunications, and temporarily blocking network channels provided bythe VPN virtual network interface card.

In some embodiments, the terminal restores the network channels providedby the VPN virtual network interface card in response to determining(e.g., upon detecting) that the application that satisfies a setcondition has stopped running in the foreground (or no longer satisfiesthe set condition).

In some embodiments, the terminal intercepts calls and short messages(e.g., texts) when the application running satisfies the one or more setconditions. In some embodiments, the terminal intercepts calls and shortmessages (e.g., texts) when the communication (e.g., networkcommunication) for the applications that are not within the set ofapplications is blocked.

FIG. 5 is a flowchart of a method for network control according tovarious embodiments of the present application.

Referring to FIG. 5, process 500 for network control is provided.Process 500 can be implemented in connection with virtual privatenetwork (VPN) 200 of FIG. 2. Process 500 can be implemented inconnection with process 100 of FIG. 1, process 300 of FIG. 3, and/orprocess 400 of FIG. 4. Process 100 can be implemented by computer system600 of FIG. 6.

At 510, a terminal determines whether a target software is running. Insome embodiments, the terminal determines whether a target software isrunning in the foreground. The operating system of the terminal candetermine the one or more software running on the terminal (e.g., basedon an API that can determine applications running in the foreground,etc.). The operating system of the terminal can determine whethersoftware is a target software

In some embodiments, a target software corresponds to an applicationthat requires a large amount of network communication bandwidth in orderto provide a certain Quality of Service to a user thereof. For example,a target software can consume a network communication bandwidth thatexceeds one or more predefined thresholds. As another example, a targetsoftware can have a minimum targeted network communication bandwidthassociated therewith. The minimum targeted network communicationbandwidth can correspond to network communication bandwidth with whichthe corresponding target software will operate as desired. For example,the minimum targeted network communication bandwidth can be configuredaccording to user settings or preferences. As another example, theminimum targeted network communication bandwidth can be predefined by adeveloper of the software.

In some embodiments, a terminal stores a mapping of software to targetsoftware. The mapping of applications to target software can identifyapplications installed on the terminal that correspond to targetsoftware. As an example, the mapping of software to target software canbe configured by a user (e.g., according to user preferences or usersettings). As another example, the mapping of software to targetsoftware can be configured based on an indicator associated with asoftware installed on the terminal. The indicator can also be referredto herein as the target speed-boost indicator. The indicator can be setaccording to whether the corresponding application is a target software.As an example, the indicator can be set by the user (e.g., according touser preferences or user settings). As another example, the indicatorcan be set by the developer of the software.

In some embodiments, the target speed-boost indicator is set on asoftware-by-software basis. For example, the target speed-boostindicator can be set for a software individually (e.g., independent ofthe target speed-boost indicator setting of another software). In someembodiments, the target speed-boost indicator is set according tosoftware type. An example is one or more software installed on theterminal and having a particular type of software (e.g., a predefinedtype of software). Software can be associated with one or more types ofsoftware. The one or more types of software with which a particularsoftware is associated can be set by a user, an administrator, and/or adeveloper of the particular software.

At 520, communication for software that is not within a set of softwareis controlled. For example, the network communication status of softwareother than the target software can be controlled according to a presetrule. The network communication status can comprise networkcommunication speed or network communication switches.

In some embodiments, in response to determining that target software isrunning, the terminal invokes control of the communication for softwarethat is not within a set of software that is controlled. For example, inresponse to determining that target software is running, the terminalinvokes control of communication for non-speed-boost software orsoftware that is not target software, or software that is not otherwiseset to be exempted from control of communication thereof.

In some embodiments, the preset rule comprises: control the networkcommunication status of software other than the target software when thetarget software is running in the foreground. As an example, a presetrule comprises: control the network communication status of softwareother than the target software when (e.g., in response to determiningthat) the target software has been running for a length of time greaterthan or equal to a duration threshold value. As an example, a presetrule comprises: control the network communication status of softwareother than the target software when (e.g., in response to determiningthat) the data flow consumed by the target software is greater than orequal to a data flow threshold value.

In some embodiments, controlling the network communication status ofsoftware other than the target software comprises using a VPN to controlthe network communication status of software other than the targetsoftware. For example, the VPN can be used to control networkcommunication switches for software other than the target software(e.g., the target speed-boost application described above in connectionwith FIG. 1). A description of a manner by which a VPN is used tocontrol network communication or network communication switches isdescribed above.

In some embodiments, controlling communication for software other thanthe target software comprises controlling the network communicationspeed of software other than the target software (e.g., to reduce orlower the network bandwidth occupied by software other than the targetsoftware) so as to ensure smooth running by the target software.

FIG. 6 is a functional diagram of a computer system for performingnetwork control according to various embodiments of the presentdisclosure.

Referring to FIG. 6, computer system 600 is provided. Computer system600 be implemented in connection with virtual private network (VPN) 200of FIG. 2. Computer system 600 can implement at least part of process100 of FIG. 1, process 300 of FIG. 3, process 400 of FIG. 4, and/orprocess 500 of FIG. 5.

Computer system 600, which includes various subsystems as describedbelow, includes at least one microprocessor subsystem (also referred toas a processor or a central processing unit (CPU)) 602. For example,processor 602 can be implemented by a single-chip processor or bymultiple processors. In some embodiments, processor 602 is a generalpurpose digital processor that controls the operation of the computersystem 600. Using instructions retrieved from memory 610, the processor602 controls the reception and manipulation of input data, and theoutput and display of data on output devices (e.g., display 618).

Processor 602 is coupled bi-directionally with memory 610, which caninclude a first primary storage, typically a random access memory (RAM),and a second primary storage area, typically a read-only memory (ROM).As is well known in the art, primary storage can be used as a generalstorage area and as scratch-pad memory, and can also be used to storeinput data and processed data. Primary storage can also storeprogramming instructions and data, in the form of data objects and textobjects, in addition to other data and instructions for processesoperating on processor 602. Also as is well known in the art, primarystorage typically includes basic operating instructions, program code,data, and objects used by the processor 602 to perform its functions(e.g., programmed instructions). For example, memory 610 can include anysuitable computer-readable storage media, described below, depending onwhether, for example, data access needs to be bi-directional oruni-directional. For example, processor 602 can also directly and veryrapidly retrieve and store frequently needed data in a cache memory (notshown). The memory can be a non-transitory computer-readable storagemedium.

A removable mass storage device 612 provides additional data storagecapacity for the computer system 600, and is coupled eitherbi-directionally (read/write) or uni-directionally (read only) toprocessor 602. For example, storage 612 can also includecomputer-readable media such as magnetic tape, flash memory, PC-CARDS,portable mass storage devices, holographic storage devices, and otherstorage devices. A fixed mass storage 620 can also, for example, provideadditional data storage capacity. The most common example of massstorage 620 is a hard disk drive. Mass storage device 612 and fixed massstorage 620 generally store additional programming instructions, data,and the like that typically are not in active use by the processor 602.It will be appreciated that the information retained within mass storagedevice 612 and fixed mass storage 620 can be incorporated, if needed, instandard fashion as part of memory 610 (e.g., RAM) as virtual memory.

In addition to providing processor 602 access to storage subsystems, bus614 can also be used to provide access to other subsystems and devices.As shown, these can include a display monitor 618, a network interface616, a keyboard 604, and a pointing device 606, as well as an auxiliaryinput/output device interface, a sound card, speakers, and othersubsystems as needed. For example, the pointing device 606 can be amouse, stylus, track ball, or tablet, and is useful for interacting witha graphical user interface.

The network interface 616 allows processor 602 to be coupled to anothercomputer, computer network, or telecommunications network using anetwork connection as shown. For example, through the network interface616, the processor 602 can receive information (e.g., data objects orprogram instructions) from another network or output information toanother network in the course of performing method/process steps.Information, often represented as a sequence of instructions to beexecuted on a processor, can be received from and outputted to anothernetwork. An interface card or similar device and appropriate softwareimplemented by (e.g., executed/performed on) processor 602 can be usedto connect the computer system 600 to an external network and transferdata according to standard protocols. For example, various processembodiments disclosed herein can be executed on processor 602, or can beperformed across a network such as the Internet, intranet networks, orlocal area networks, in conjunction with a remote processor that sharesa portion of the processing. Additional mass storage devices (not shown)can also be connected to processor 602 through network interface 616.

An auxiliary I/O device interface (not shown) can be used in conjunctionwith computer system 600. The auxiliary I/O device interface can includegeneral and customized interfaces that allow the processor 602 to sendand, more typically, receive data from other devices such asmicrophones, touch-sensitive displays, transducer card readers, tapereaders, voice or handwriting recognizers, biometrics readers, cameras,portable mass storage devices, and other computers.

The computer system shown in FIG. 6 is but an example of a computersystem suitable for use with the various embodiments disclosed herein.Other computer systems suitable for such use can include additional orfewer subsystems. In addition, bus 614 is illustrative of anyinterconnection scheme serving to link the subsystems. Other computerarchitectures having different configurations of subsystems can also beutilized.

It should be understood that the devices and methods that are disclosedin the several embodiments provided above can be realized in other ways.For example, the device embodiment described above is merelyillustrative. For example, the delineation of units is merely adelineation according to local function. The delineation can take adifferent form during actual implementation.

A person of ordinary skill in the art can understand that all or some ofthe method steps, the systems, and the functional modules/units in themeans that are disclosed above may be implemented as software, firmware,hardware, and appropriate combinations thereof. In hardwareimplementations, the partitions between the functional modules/unitsmentioned in the descriptions above do not necessarily correspond tophysical component partitions. For example, a physical component mayhave multiple functions, or one function or step may be executed jointlyby a number of physical components. Some components or all componentsmay be implemented as software executed by a processor, such as adigital signal processor or a microprocessor or may be implemented ashardware or may be implemented as an integrated circuit, such as anapplication-specific integrated circuit. Such software can bedistributed across computer-readable media. Computer-readable media maycomprise computer storage media (or non-transitory media) andcommunication media (or transitory media). As is common knowledge topersons of ordinary skill in the art, the term “computer storage media”includes volatile and non-volatile and removable and non-removable mediaimplemented in any method or technology for storage of information (suchas computer-readable instructions, data structures, program modules, orother data). Computer storage media includes, but is not limited to,RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM,digital versatile disks (DVDs) or other optical disk storage, magneticcassettes, magnetic tapes, magnetic disk storage or other magneticstorage devices, or any other media that can be used to store desiredinformation and that can be accessed by a computer. In addition, it iscommon knowledge to persons with ordinary skill in the art thatcommunication media generally contains computer-readable instructions,data structures, program modules, or other data such as in carrier wavesor modulated signal data of other types of transmission mechanisms andthat can include any information-conveying media.

The above shows and describes the basic principles and main features ofthe present application, as well as the advantages of the presentapplication. The present application is not restricted by theembodiments described above. The above embodiments and the descriptionsin the specification merely explain the principles of the presentapplication. There may also be various modifications and improvements tothe present application, which, so long as they do not depart from thespirit and scope of the present application, fall without exceptionwithin the limits of protection claimed by the present application.

Although the foregoing embodiments have been described in some detailfor purposes of clarity of understanding, the invention is not limitedto the details provided. There are many alternative ways of implementingthe invention. The disclosed embodiments are illustrative and notrestrictive.

What is claimed is:
 1. A method, comprising: determining, by one or moreprocessors, whether a target application is running in a foreground of aterminal, the target application being included in a set of targetapplications; and in response to determining that the target applicationis running in the foreground, blocking or throttling, by the one or moreprocessors, network communication for at least one application notincluded in the set of target applications, wherein the blocking orthrottling of the network communication for the at least one applicationnot included in the set of target applications comprises using a virtualprivate network (VPN) in connection with the blocking or throttling ofthe network communication.
 2. The method of claim 1, wherein the set oftarget applications further comprises: applications associated with thetarget application.
 3. The method of claim 1, wherein the set of targetapplications correspond to one or more applications that are installedon the terminal.
 4. The method of claim 1, wherein the set of targetapplications is determined based at least in part on querying a list ofnetwork speed-boost applications.
 5. The method of claim 4, furthercomprising determining the set of target applications based at least inpart on querying a mapping of the applications to the target speed-boostapplications for one or more target speed-boost applicationscorresponding to the target application.
 6. The method of claim 1,wherein the set of target applications is determined based at least inpart on querying a mapping of application to target speed-boostapplications for one or more target speed-boost applicationscorresponding to the target applications.
 7. The method of claim 1,wherein the set of target applications is determined based at least inpart on one or more of a determined quality of service associated withthe target application, a selection input by a user, and a type ofapplication.
 8. The method of claim 1, wherein the VPN runs on a localnetwork control layer of the terminal.
 9. The method of claim 1, furthercomprising: in response to determining that the target application isrunning in the foreground, invoking the VPN.
 10. The method of claim 1,wherein the using the VPN in connection with the blocking the networkcommunication for the at least one application not included in the setof target applications comprises: directing the set of targetapplications to use network channels provided by a physical networkinterface card to conduct network communications; and directing the atleast one application not included in the set of target applications touse network channels provided by the VPN to conduct networkcommunications, and temporarily blocking network channels provided by aVPN virtual network interface card corresponding to the VPN.
 11. Themethod of claim 10, wherein the using the VPN in connection with theblocking the network communication comprises temporarily blockingnetwork channels provided by the VPN virtual network interface card. is12. The method of claim 10, further comprising: restoring the networkchannels provided by the VPN virtual network interface card in responseto determining that the target application has stopped running in theforeground.
 13. The method of claim 1, further comprising: determiningthat the target application is no longer running in the foreground; andin response to determining that the target application is not running inthe foreground, stopping the blocking of the network communication forthe at least one application not included in the set of targetapplications.
 14. The method of claim 1, further comprising: in responseto the blocking of the network communication for the at least oneapplication not included in the set of target applications, allocatingnetwork bandwidth to the set of target applications.
 15. The method ofclaim 14, wherein the network bandwidth allocated to the set of targetapplications comprises additional bandwidth that is made available inconnection with the blocking of the network communication for the atleast one application not included in the set of target applications.16. The method of claim 1, further comprising: in response todetermining that the target application is running in the foreground,intercepting telephone calls and short messages based at least in parton an interception list; and displaying information of the interceptedtelephone calls and short messages in a form of a floating window in adisplay interface.
 17. The method of claim 16, further comprising: inresponse to intercepting a first telephone call or a first shortmessage, displaying information associated with the intercepting of thefirst telephone call or the first short message, wherein the informationassociated with the intercepting of the first telephone call or thefirst short message is displayed in a floating window in a displayinterface.
 18. A terminal, comprising: one or more processors configuredto: determine whether a target application is running in a foreground ofa terminal, the target application being included in a set of targetapplications; and in response to determining that the target applicationis running in the foreground, block or throttle network communicationfor at least one application not included in the set of targetapplications, wherein the blocking or throttling of the networkcommunication for the at least one application not included in the setof target applications comprises using a virtual private network (VPN)in connection with the blocking or throttling of the networkcommunication; and one or more memories coupled to the one or moreprocessors, configured to provide the one or more processors withinstructions.
 19. A computer program product, the computer programproduct being embodied in a non-transitory computer readable storagemedium and comprising computer instructions for: determining, by one ormore processors, whether a target application is running in a foregroundof a terminal, the target application being included in a set of targetapplications; and in response to determining that the target applicationis running in the foreground, blocking or throttling, by the one or moreprocessors, network communication for at least one application notincluded in the set of target applications, wherein the blocking orthrottling of the network communication for the at least one applicationnot included in the set of target applications comprises using a virtualprivate network (VPN) in connection with the blocking or throttling ofthe network communication.